Trojan.Starman.6569

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##0.175.40':139
'60.##0.10.186':445
'60.##0.139.35':139
'60.##0.141.78':139
'60.##0.139.35':445
'60.##0.78.46':139
'60.##0.22.169':139
'60.##0.141.78':445
'60.##0.175.40':445
'60.##0.10.186':139
'60.#00.15.1':445
'60.##0.209.128':445
'60.##0.12.201':445
'60.##0.68.23':445
'60.##0.105.40':445
'60.##0.181.137':445
'60.##0.135.181':445
'60.##0.62.180':445
'60.##0.137.20':445
'60.##0.151.101':139
'60.##0.218.29':139
'60.##0.217.176':139
'60.##0.17.73':139
'60.##0.46.62':139
'60.##0.218.175':139
'60.##0.244.38':139
'60.##0.12.17':139
'60.##0.236.63':139
'60.##0.62.14':139
'60.##0.114.136':139
'60.##0.21.188':139
'60.##0.230.34':139
'60.##0.150.230':139
'60.##0.106.115':139
'60.##0.202.122':139
'60.##0.58.202':139
'60.##0.12.181':139
'60.##0.155.179':139
'60.##0.19.125':445
'60.##0.83.39':445
'60.##0.59.250':445
'60.##0.214.14':445
'60.##0.78.191':445
'60.##0.80.110':445
'60.##0.225.33':445
'60.##0.82.207':445
'60.##0.11.13':445
'60.##0.246.135':445
'60.##0.14.196':445
'60.##0.116.247':445
'60.##0.105.97':445
'60.##0.135.181':139
'60.##0.16.57':445
'60.##0.13.43':445
'60.##0.129.71':445
'60.##0.195.233':445
'60.##0.176.139':445
'60.##0.70.15':445
'60.##0.3.171':445
'60.##0.148.50':445
'60.##0.102.59':445
'60.##0.77.40':445
'60.##0.45.52':445
'60.##0.7.243':445
'60.##0.57.187':445
'60.##0.255.214':445
'60.##0.47.186':445
'60.##0.185.194':445
'60.##0.115.24':445
'60.##0.50.234':445
'60.##0.143.48':445
'60.##0.24.225':445
'60.##0.132.96':445
'60.##0.86.129':445
'60.##0.193.1':445
'60.##0.32.19':445
'60.##0.250.87':445
'60.##0.74.78':445
'60.##0.196.48':445
'60.##0.113.194':445
'60.##0.77.198':445
'60.##0.73.230':445
'60.##0.37.160':445
'60.##0.4.216':445
'60.##0.195.74':445
'60.##0.43.227':445
'60.##0.54.144':445
'60.##0.218.29':445
'60.##0.46.62':445
'60.##0.17.73':445
'60.##0.151.101':445
'60.##0.12.17':445
'60.##0.244.38':445
'60.##0.157.243':445
'60.##0.236.63':445
'60.##0.218.175':445
'60.##0.126.142':445
'60.##0.165.192':445
'60.##0.114.143':445
'60.##0.128.81':445
'60.##0.52.211':445
'60.##0.94.84':139
'60.##0.113.15':139
'60.##0.182.169':139
'60.##0.144.76':139
'60.##0.143.252':445
'60.##0.157.201':445
'60.##0.209.15':445
'60.##0.196.191':445
'60.##0.144.145':445
'60.##0.239.216':445
'60.##0.96.10':445
'60.##0.189.158':445
'60.##0.134.150':445
'60.##0.184.176':445
'60.##0.217.176':445
'60.##0.144.145':139
'60.##0.157.201':139
'60.##0.4.216':139
'60.##0.196.191':139
'60.##0.209.15':139
'60.##0.184.176':139
'60.##0.96.10':139
'60.##0.239.216':139
'60.##0.134.150':139
'60.##0.37.160':139
'60.##0.113.194':139
'60.##0.77.198':139
'60.##0.157.243':139
'60.##0.54.144':139
'60.##0.74.78':139
'60.##0.195.74':139
'60.##0.43.227':139
'60.##0.196.48':139
'60.##0.73.230':139
'60.##0.21.188':445
'60.##0.106.115':445
'60.##0.150.230':445
'60.##0.114.136':445
'60.##0.12.181':445
'60.##0.58.202':445
'60.##0.62.14':445
'60.##0.155.179':445
'60.##0.202.122':445
'60.##0.230.34':445
'60.##0.114.143':139
'60.##0.128.81':139
'60.##0.189.158':139
'60.##0.143.252':139
'60.##0.126.142':139
'60.##0.78.46':445
'60.##0.22.169':445
'60.##0.165.192':139
'60.##0.52.211':139
'60.#00.92.4':445
'60.##0.222.21':445
'60.#00.88.1':139
'60.##0.57.88':139
'60.##0.255.97':445
'60.##0.178.169':445
'60.##0.123.167':445
'60.##0.74.62':445
'60.##0.79.18':445
'60.##0.0.171':139
'60.##0.185.64':139
'60.##0.2.246':139
'60.##0.13.10':139
'60.##0.226.57':139
'60.##0.133.237':139
'60.##0.239.150':139
'60.##0.93.163':139
'60.##0.249.52':139
'60.##0.136.65':139
'60.##0.132.150':445
'60.##0.23.134':445
'60.##0.218.37':445
'60.##0.150.218':445
'60.##0.166.239':445
'60.##0.104.78':445
'60.##0.74.90':445
'60.##0.211.217':445
'60.##0.53.154':445
'60.##0.37.220':445
'60.##0.132.93':445
'60.##0.194.132':445
'60.#00.55.6':445
'60.##0.93.113':445
'60.##0.112.194':445
'60.##0.98.25':445
'60.##0.90.25':445
'60.##0.160.228':445
'60.##0.174.42':445
'60.#00.0.15':139
'60.##0.160.228':139
'60.##0.174.42':139
'60.##0.194.132':139
'60.##0.112.194':139
'60.##0.98.25':139
'60.##0.218.37':139
'60.##0.150.218':139
'60.##0.90.25':139
'60.##0.37.220':139
'60.##0.132.93':139
'60.##0.222.21':139
'60.##0.74.62':139
'60.#00.92.4':139
'60.##0.178.169':139
'60.##0.79.18':139
'60.#00.55.6':139
'60.##0.93.113':139
'60.##0.255.97':139
'60.##0.123.167':139
'60.##0.151.235':139
'60.##0.63.250':139
'60.##0.114.252':139
'60.##0.124.89':139
'60.##0.54.29':139
'60.#00.20.5':139
'60.##0.249.222':139
'60.##0.142.13':139
'60.##0.255.159':139
'60.##0.222.197':139
'60.##0.166.239':139
'60.##0.211.217':139
'60.##0.132.150':139
'60.##0.23.134':139
'60.##0.53.154':139
'60.##0.172.76':139
'60.##0.227.106':139
'60.##0.104.78':139
'60.##0.74.90':139
'60.##0.115.24':139
'60.##0.50.234':139
'60.##0.143.48':139
'60.##0.24.225':139
'60.##0.132.96':139
'60.##0.86.129':139
'60.##0.193.1':139
'60.##0.32.19':139
'60.##0.250.87':139
'60.##0.82.207':139
'60.##0.78.191':139
'60.##0.83.39':139
'60.##0.14.196':139
'60.##0.214.14':139
'60.##0.59.250':139
'60.##0.246.135':139
'60.##0.225.33':139
'60.##0.80.110':139
'60.##0.11.13':139
'60.##0.68.23':139
'60.#00.15.1':139
'60.##0.19.125':139
'60.##0.12.201':139
'60.##0.209.128':139
'60.##0.137.20':139
'60.##0.181.137':139
'60.##0.105.40':139
'60.##0.62.180':139
'60.##0.57.187':139
'60.##0.77.40':139
'60.##0.3.171':139
'60.##0.185.194':139
'60.##0.102.59':139
'60.##0.148.50':139
'60.##0.47.186':139
'60.##0.7.243':139
'60.##0.45.52':139
'60.##0.255.214':139
'60.##0.195.233':139
'60.##0.13.10':445
'60.#00.0.15':445
'60.#00.20.5':445
'60.##0.249.222':445
'60.##0.226.57':445
'60.##0.133.237':445
'60.##0.249.52':445
'60.##0.185.64':445
'60.##0.2.246':445
'60.##0.255.159':445
'60.##0.222.197':445
'60.##0.114.252':445
'60.##0.172.76':445
'60.##0.227.106':445
'60.##0.124.89':445
'60.##0.54.29':445
'60.##0.142.13':445
'60.##0.151.235':445
'60.##0.63.250':445
'60.##0.16.57':139
'60.##0.116.247':139
'60.##0.185.64':9988
'60.##0.249.52':9988
'60.##0.105.97':139
'60.##0.70.15':139
'60.##0.129.71':139
'60.##0.13.43':139
'60.##0.176.139':139
'60.#00.20.5':9988
'60.##0.93.163':445
'60.##0.0.171':445
'60.##0.136.65':445
'60.##0.239.150':445
'60.#00.88.1':445
'60.##0.174.42':9988
'60.##0.218.37':9988
'60.##0.57.88':445
'60.##0.222.21':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней